A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct directory traversal attacks and obtain read and write access to sensitive files on a targeted system. The vulnerability is due to a lack of proper validation of files that are uploaded to an affected device. An attacker could exploit this vulnerability by uploading a crafted file to an affected system. An exploit could allow the attacker to view or modify arbitrary files on the targeted system.
References
| Link | Resource |
|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmdirtrav-eFdAxsJg | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
23 May 2023, 13:55
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:cisco:isr1100-6g:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr1100-4gltegb:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr1100-4g:-:*:*:*:*:*:*:* |
cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:1100-4gltegb_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:1100-4gltena_integrated_services_router:-:*:*:*:*:*:*:* |
| First Time |
Cisco 1100-4gltegb Integrated Services Router
Cisco 1100-4g Integrated Services Router Cisco 1100-6g Integrated Services Router Cisco 1100-4gltena Integrated Services Router |
Information
Published : 2020-07-16 18:15
Updated : 2023-12-10 13:27
NVD link : CVE-2020-3381
Mitre link : CVE-2020-3381
CVE.ORG link : CVE-2020-3381
JSON object : View
Products Affected
cisco
- 1100-4gltena_integrated_services_router
- 1100-4gltegb_integrated_services_router
- 1100-6g_integrated_services_router
- sd-wan_firmware
- 1100-4g_integrated_services_router
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')